Privacy Policy.

Information We Collect

• Username and password (stored as a secure hash — never in plain text)
• Subscription status, tier (Basic / Standard / Premium), and expiry date

• We record the total volume of data (in MB/GB) transferred through the VPN tunnel. This is used solely to manage your subscription's data allowance, which is provided as a monthly amount; earlier allowances are used first, and any unused portion expires after a fixed period. We do not inspect the content of that traffic.

• Connection and disconnection timestamps (used for billing and abuse prevention)
• The VPN server you connected to

• App version and operating system, sent with each request to our servers (used to keep the Service working correctly across app versions)
• Device model — for example "Samsung SM-A125F" or "iPhone14,3" — and, on Android, whether the device is classed as low-memory. This is a category shared by many thousands of devices, not a unique identifier (used to understand connection performance across device types)
• A one-way cryptographic hash derived from a device identifier, used solely to prevent repeated free trials from the same device. The hash cannot be reversed to recover the identifier, and it is not linked to your browsing or traffic

• The network operator (internet provider) you connect from, recorded as its public network number (ASN) — never your IP address. Your IP address is used in memory only to determine the network operator and is not stored (used to route you to a server your network can reach, and to detect when a network is blocking our servers)
• Our web server logs retain the network portion of connecting addresses (the first three parts, e.g. 103.25.240.x) for up to two weeks for security and abuse prevention. The full address is not retained

• Crash reports: the type of error, a technical stack trace, and the app version and OS at the time (used to find and fix bugs). Credentials, identifiers and server addresses are removed from these reports before they are stored
• Connection quality measurements: how long a server took to respond and whether it was reachable (used to choose better servers for your network)
• Reports of which of our service addresses your app was unable to reach (used to detect blocking and keep the Service available)

Information We Do NOT Collect

• Browsing history, websites visited, or URLs accessed
• DNS query logs. When you are connected, name lookups are resolved through the VPN tunnel so your network cannot see them; we do not record which names you look up
• Content of your internet traffic (messages, files, data packets)
• Your full IP address. It is used in memory to identify your network operator and is not written to our database
• Any form of deep-packet inspection data

How We Use Your Information

• To authenticate you and manage your subscription
• To manage data allowance limits tied to your subscription tier
• To send in-app notifications about your account (e.g., low bandwidth, renewal reminders)
• To respond to support requests
• To detect and prevent fraudulent or abusive use of the Service

We do not use your information for advertising or sell it to any third party.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may disclose information only in the following limited circumstances:

• Service providers: Hosting and infrastructure providers who process data on our behalf under strict confidentiality obligations.
• Legal requirements: If required by law, court order, or governmental authority — and only to the extent required. Because we do not log traffic, we have no browsing data to provide even if compelled.

Data Retention

• Account credentials and subscription records are retained while your account is active.
• Bandwidth usage records are retained while they remain relevant to your current allowance; older records may be removed or anonymized.
• Connection records (the server you connected to and the network operator you connected from) are retained for 30 days, then automatically deleted.
• Connection quality measurements are retained for 14 days; reports of unreachable service addresses for 90 days; free-trial sign-up records for 180 days. All are deleted automatically.
• Bandwidth session records are retained while your account is active, because your data allowance is calculated from them and allowances remain valid for three months after issue.
• Crash reports are retained while your account is active, for diagnostic purposes.
• Upon account deletion, all personal data is removed within 30 days.

Security

All data in transit between the app and our servers is encrypted using TLS. VPN traffic is encrypted using the VLESS protocol over TLS or REALITY (a TLS-based transport). Passwords are stored as cryptographic hashes and are never accessible in plain text by our staff.

We regularly review our security practices, but no system is completely immune to risk. If you suspect unauthorized access to your account, contact us immediately.

Children's Privacy

124VPN is not directed at children under the age of 17. We do not knowingly collect personal information from anyone under 17. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Your Rights

You may at any time:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

Third-Party Services

124VPN uses the following third-party infrastructure to deliver the Service:

• Cloud hosting providers — for server infrastructure. These providers are contractually prohibited from accessing or retaining your VPN traffic data.

We do not integrate any third-party analytics SDKs, advertising SDKs, or social login providers into the app.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you through an in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us: